With NPM now being an (indirect) part of Microsoft, I would expect them to introduce proprietary extension to the repository protocol (or something similar) in

With NPM now being an (indirect) part of Microsoft, I would expect them to introduce proprietary extension to the repository protocol (or something similar) in an attempt to lock the open source community into their hosting solution. And no, you cannot cleanly separate between an ecosystem-defining tool and the company that controls how said tool will behave after the next automated update.